[Bug]: https://termux.net redirects to https://ipinfo.io/census

[bidyut1153]

Problem description

My android 5 (termux.net) redirects to ipinfo.io/census. Can you please change android5 repo

Steps to reproduce the behavior.

1. Go to termux.net

What is the expected behavior?

No response

System information

• Chrome version: 98.0.4758.101
• Operating system: Android

[agnostic-apollo]

Confirmed that http://termux.net/dists/stable/Release is redirecting to https://ipinfo.io/census

Unfortunately, non of the active termux maintainers have access to termux.net to fix/look into the issue. Only @fornwall has access, who is non-responsive.

[Grimler91]

Support for android 5 & 6 have been dropped for more than 2 years now in any case

[Grimler91]

Repo from archive at https://archive.org/details/termux-repositories-legacy has been uploaded to packages.termux.org, to subscribe to the repo put

deb https://packages.termux.org/termux-main-21 stable main

in $PREFIX/etc/apt/sources.list.

[agnostic-apollo]

Great. But wouldn't the repo be signed with your new key? Would be a mirror of already signed repo.

Will look into pushing update for old apps. Will need to think on how versioning will be handled. I guess only github releases for now.

[Grimler91]

Yes, I could update repo urls in apt and *-repo and re-sign the repo with my old, deprecated, key that is already part of termux-keyring on the android-5 branch, but users anyways need to first manually change the repo url to get that update so doesn't really simplify anything for now

[agnostic-apollo]

I think best use your new key for repo signing instead of revoked keys. If app releases are going to be on github, then F-Droid users would still have to reinstall app, which can have new key in bootstrap, basically master branch termux-keyring. If we are going to put an effort to support legacy, then users should at least put effort to switch source. Asking everyone to change url would be a nightmare too for us like bintray.

You can add manual termux-keyring deb installation command for who don't want to shift.

[Grimler91]

If we create new bootstraps and make a new release of the android-5 app, then sure, switching to new key sounds good, but re-signing the repo now will just create one extra hurdle for users: instead of just changing the repo URL they also have to manually install new termux-keyring package

[agnostic-apollo]

Well, old apps have vulnerabilities so should be patched and updated.

Not much hurdle. They can copy and paste something like following when new termux-keyring package is published.

sed -i'' 's|deb https://termux.net stable main|deb https://packages.termux.org/termux-main-21 stable main|' "$PREFIX/etc/apt/sources.list"
sed -i'' 's|deb https://dl.bintray.com/grimler/game-packages-21 games stable|deb https://termux.org/game-packages-21-bin games stable|' "$PREFIX/etc/apt/sources.list.d/game.list"
sed -i'' 's|deb https://dl.bintray.com/grimler/science-packages-21 science stable|deb https://termux.org/science-packages-21-bin science stable|' "$PREFIX/etc/apt/sources.list.d/science.list"
sed -i'' 's|deb https://dl.bintray.com/grimler/termux-root-packages-21 root stable|deb https://termux.org/termux-root-packages-21-bin root stable|' "$PREFIX/etc/apt/sources.list.d/root.list"


curl -LO https://packages.termux.org/termux-main-21/dists/stable/main/binary-all/termux-keyring_3.2_all.deb
apt install ./termux-keyring_3.2_all.deb
apt update
apt upgrade

https://packages.termux.org/termux-main-21/dists/stable/main/binary-all